Update secure boot certs: ca0 as Source2, boot0 as Source1

This commit is contained in:
Andrew Lukoshko 2026-03-08 23:14:45 +00:00
parent d392c5358f
commit 19a0d5c027
4 changed files with 3 additions and 2 deletions

Binary file not shown.

Binary file not shown.

View File

@ -123,7 +123,7 @@ version signed by the UEFI signing service. \
else \
cp -av %{-d*}/%{-b*}%{-a*}.efi %{-b*}%{-a*}-unsigned.efi \
fi \
%{expand:%%sign -i %{-b*}%{-a*}-unsigned.efi -o %{-b*}%{-a*}-signed.efi -n redhatsecureboot501 -a %{SOURCE2} -c %{SOURCE1} } \
%{expand:%%sign -i %{-b*}%{-a*}-unsigned.efi -o %{-b*}%{-a*}-signed.efi -n almalinuxsecureboot0 -a %{SOURCE2} -c %{SOURCE1} } \
%{nil}
# -a <efiarch>

View File

@ -16,7 +16,8 @@ ExclusiveArch: %{efi}
ExcludeArch: %{arm} %{ix86}
Source0: shim.rpmmacros
Source1: almalinuxsecurebootca0.cer
Source1: almalinuxsecureboot0.cer
Source2: almalinuxsecurebootca0.cer
# keep these two lists of sources synched up arch-wise. That is 0 and 10
# match, 1 and 11 match, ...